hcjcn Goto Github PK

msysgit

The msysGit repository. Please post all patches to the msysGit mailing list.

nikto

Nikto web server scanner

note

记录自己写的工具和学习笔记

notes

个人笔记

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

onelistforall

Rockyou for web fuzzing

passive-scan-client

Burp被动扫描流量转发插件

passive-scan-client-and-sendto

burp被动扫描自动转发和手动重发插件

peiqi-wiki-poc

鹿不在侧，鲸不予游🐋

peiqi-wiki-poc-1

鹿不在侧，鲸不予游🐋

penetration_testing_poc

渗透测试有关的POC、EXP、脚本、提权、小工具等，欢迎补充、完善---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

penetrationtest-tips

渗透测试，渗透测试小技巧，渗透测试Tips，师傅们跟我一起维护更新吧~

pentesterspecialdict

渗透测试人员专用精简化字典 Dictionary for penetration testers happy hacker

php_mt_seed

php_mt_seed is a PHP mt_rand() seed cracker

pic

poc-bomber

利用大量高威胁poc/exp快速获取目标权限，用于渗透和红队快速打点

pocassist

pocassist是一款全新的开源漏洞测试框架，无需代码知识也可实现对poc的在线编辑、管理、测试。 使用之前请先阅读文档。

poclist

Alibaba-Nacos-Unauthorized/ApacheDruid-RCE_CVE-2021-25646/MS-Exchange-SSRF-CVE-2021-26885/Oracle-WebLogic-CVE-2021-2109_RCE/RG-CNVD-2021-14536/RJ-SSL-VPN-UltraVires/Redis-Unauthorized-RCE/TDOA-V11.7-GetOnlineCookie/VMware-vCenter-GetAnyFile/yongyou-GRP-U8-XXE

pocorexp_in_github

聚合Github上已有的Poc或者Exp，CVE信息来自CVE官网。Auto Collect Poc Or CVE from Github by CVE ID.

reapoc

OpenSource Poc && Vulnerable-Target Storage Box.

recaptcha

reCAPTCHA = REcognize CAPTCHA: A Burp Suite Extender that recognize CAPTCHA and use for intruder payload 自动识别图形验证码并用于burp intruder爆破模块的插件

red-team-links

2019年红队资源链接，资源不是本人整理出来，来自互联网，因为流传的少，特意在此做个备份，做个分享。

redteam_vul

红队作战中比较常遇到的一些重点系统漏洞整理。

resign

A burp extender that recalculate signature value automatically after you modified request parameter value.

scan4all

基于优化后的vscan，继续走更多集成、自动化功能

secguide

面向开发人员梳理的代码安全指南

sn1per

Discover the attack surface and prioritize risks with our continuous Attack Surface Management (ASM) platform - Sn1per Professional #pentest #redteam #bugbounty

sqlmap

Automatic SQL injection and database takeover tool

sqlmap_gui

sqlmap图形化注入工具-Windows版，只需要你复制粘贴一下，选择所需功能，点击检测即可开始你的注入之旅。Mac用户请使用sqlmap文件夹中python sqlmap.py --gui运行